
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier: NMfsvnzyatu2RcGY2gODFRyKzHRus6qS1NKnRsH3Z6w=
Subject key identifier: 34:25:F2:EE:33:C5:E4:D2:E2:7B:88:C5:14:BB:09:85:D8:4D:76:E6
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number: 04AA
Signing time: Wed 13 May 2026 00:06:01 +0000
Manifest this update: Wed 13 May 2026 00:06:00 +0000
Manifest next update: Wed 20 May 2026 00:06:00 +0000
Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: DuyIE9jK+hT45GUVgNjI9ACE9mQy/pgheydTkLBLXeA=)
2: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: fdGiVPweujLtnlzQBkxSdHNbQU/GitI5AIHJtY/ChyQ=)
3: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: ZfXqil/HZcQKRq3QzpskMCnsaTW6MQfjBYeGj9Tkbjo=)
4: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=)
5: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: TYYIQ0iKctVFngYjoXqXM7SKx8woLPPUnuROtzeNaq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: May 13 00:06:00 2026 GMT
Not After : May 20 00:06:00 2026 GMT
Subject: CN=6a03c069-61fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:50:c9:1f:a1:ac:ad:e4:04:ed:83:1e:23:
54:0a:4b:1f:07:1c:4f:6e:e2:cb:37:4c:71:44:76:
be:e6:39:c4:d3:8e:bd:99:32:3d:ef:06:6e:d4:ac:
c7:f0:00:fa:05:ae:e9:53:6c:8c:20:ff:3d:d9:91:
31:51:e1:f3:61:02:af:12:ea:32:3b:ce:74:66:6a:
4d:bc:21:e4:a1:73:99:6d:37:d5:9a:6e:af:4e:20:
fd:f1:a3:b1:f3:80:fa:50:40:bb:32:0d:3b:89:69:
e7:25:9b:6d:92:3e:98:47:e3:66:36:4b:75:93:d0:
a0:9f:f4:79:49:f8:0b:ac:6c:cc:20:d2:66:ad:21:
cd:f2:f5:bd:a7:97:41:19:14:0a:e9:92:15:73:6f:
99:b9:cd:d4:a0:26:6d:66:92:19:46:63:00:c3:b6:
e7:89:69:f8:87:fd:c3:4e:bd:77:fe:9b:b6:f8:db:
b8:26:a4:b3:0b:d3:b0:d0:9e:d4:2a:87:73:e2:a5:
8f:0b:de:62:b5:31:2f:0b:30:b5:ad:a5:bc:f7:cb:
93:99:89:e1:4f:0d:16:92:3c:37:6f:1d:98:6a:fd:
1f:95:6b:02:f3:dd:ce:b2:9d:7e:51:9c:62:53:5c:
ae:be:29:7c:18:95:3b:84:6f:49:dd:94:d1:eb:63:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:F2:EE:33:C5:E4:D2:E2:7B:88:C5:14:BB:09:85:D8:4D:76:E6
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:f0:cd:a1:e1:b5:be:eb:05:97:8f:38:7f:57:d9:b2:17:
55:3f:10:c2:8d:62:c0:6c:5e:be:4c:2c:2f:b7:53:35:e9:59:
ed:cd:2a:c8:3c:9e:3f:06:dc:dd:3e:b8:0f:2f:5b:ac:e0:83:
d2:9b:6b:91:b1:6c:ad:9a:49:c9:98:32:f7:2e:25:6c:b8:b8:
8b:d0:7e:3a:9e:b0:a4:1e:77:98:68:49:94:90:b9:ed:ad:c7:
64:6a:fd:41:09:27:02:69:6c:05:56:b5:ea:c1:f7:cb:14:88:
5f:63:9a:86:b5:ae:0f:09:44:4d:e3:cb:68:e7:87:73:59:46:
01:51:6c:69:fc:67:e0:0c:c9:2e:2a:ba:ce:b4:2e:54:b0:a7:
35:8f:f5:29:96:08:8a:8c:ef:fd:11:8c:17:00:1a:29:17:e9:
c8:6d:ff:89:97:ef:ac:24:c5:65:6b:96:c6:1c:d9:db:03:f9:
48:9e:b9:38:c4:fe:8c:14:c9:f2:70:07:06:83:74:81:f5:4f:
e9:fc:e0:dd:57:ec:ae:fa:34:38:5c:b7:23:59:f3:dc:9c:ea:
af:f6:85:4a:ae:97:e9:ed:ad:b7:c3:10:20:59:28:29:99:51:
09:b0:31:16:ed:ca:df:8a:84:c2:84:e7:b9:9d:e0:e8:0c:0f:
73:67:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:11 2026 by rpki-client